and extracts the following text as a script body — the dev server then fails its dependency scan with `Expected ";" but found "non"` from the words "non-allowlisted hosts", which breaks e2e. So, what this buys, so nobody reads more or less into it: blocks external `script src=` from non-allowlisted hosts blocks injected inline scripts — each one is pinned by hash blocks fetch/XHR/WebSocket exfiltration (connect-src allowlist) blocks form-action, base-uri, object-src vectors does not stop image-based exfiltration — img-src must allow https: because event media comes from arbitrary publishers' og:image The cost of hashing is that an inline script edited after the hashes are computed is silently refused by the browser. That is why the violation reporter below exists: report-uri/report-to are ignored in a meta element and Pages serves no CSP header, so violations are caught in-page and sent to PostHog instead (src/lib/csp-report.ts, #241). frame-ancestors is deliberately NOT in this string: it is ignored in a meta element and browsers log a warning about it on every page load. It lives in public/_headers instead, ready for a CDN in front of Pages. X-Frame-Options (set there too) is the clickjacking control that actually applies today. */ }
attack high confidence

TTP Attack on Ziarat Cross Customs House Kills 6 Security Personnel; 21 Militants Killed in Response Across Balochistan

| Afghanistan War

Tehreek-i-Taliban Pakistan (TTP) militants stormed the Customs House at Ziarat Cross on the N-50 highway in Pishin district, Balochistan, on the night of August 31-September 1, 2026, in a coordinated attempt to breach the facility. ISPR said 6 personnel — including 2 officers and a Customs official — were martyred in the ensuing fire exchange, while security forces killed 10 Fitna al-Khawarij attackers on-site. In a separate but related response operation the same period, forces killed 11 Fitna al-Hindustan militants along the N-40 highway near Nokcha in Chagai district, recovering a large quantity of weapons, ammunition and explosives — bringing the province-wide toll to 21 militants killed. TTP claimed responsibility via its Special Istishhadi Force and put the security-personnel death toll at 15, a figure Pakistani officials dispute.

Media

TTP militants attacked the Ziarat Cross Customs House in Pishin district, killing 6 security personnel before 21 militants were killed in the response.
TTP militants attacked the Ziarat Cross Customs House in Pishin district, killing 6 security personnel before 21 militants were killed in the response. — The Express Tribune

Sources

View full Afghanistan War dashboard